CVE-2009-0410

Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.

🔗 References (12)

• cve@mitrehttp://download.novell.com/Download?buildid=GjZRRdqCFW0
• cve@mitrehttp://secunia.com/advisories/33744
• cve@mitrehttp://www.novell.com/support/viewContent.do?externalId=7002502
• cve@mitrehttp://www.securityfocus.com/archive/1/500609/100/0/threaded
• cve@mitrehttp://www.securityfocus.com/bid/33560
• cve@mitrehttp://www.zerodayinitiative.com/advisories/ZDI-09-010/
• af854a3a-2127-422b-91ae-364da2661108http://download.novell.com/Download?buildid=GjZRRdqCFW0
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33744
• af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/support/viewContent.do?externalId=7002502
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/500609/100/0/threaded
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/33560
• af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-09-010/